Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/1a00eadd-416e-3ddb-899c-fc71fa1458d3.roa
File: 1a00eadd-416e-3ddb-899c-fc71fa1458d3.roa (raw, json)
Hash identifier: JmNGcuj8CVsqr805ebSYXa42RgdNq7G3CXaP81+pTXY=
Subject key identifier: 5D:A2:0B:D5:5B:C2:38:B7:06:70:C5:04:6E:8C:FB:57:C2:0D:C9:8A
Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial: 010D0C9F432858484C101DA5DF49D3CAECC59FC0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/1a00eadd-416e-3ddb-899c-fc71fa1458d3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 2701
IP address blocks: 198.248.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:1d:a5:df:49:d3:ca:ec:c5:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b53a1b98-e600-408e-b239-7108b0a790a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:25:88:75:4a:2a:38:81:15:8f:eb:63:9f:
8e:e1:d0:62:70:12:89:d4:84:3b:de:33:90:00:f3:
53:bc:58:5a:8a:d1:b4:e3:36:26:96:cc:71:9e:00:
6a:56:d3:8a:57:0d:77:34:aa:df:64:a5:e3:3e:40:
75:48:1d:4f:c2:ed:5e:e5:82:e6:21:bf:e3:14:73:
de:4f:5f:f1:b0:d8:59:f4:68:5f:d9:68:c1:cb:3e:
e7:20:89:b0:08:c7:38:df:23:11:aa:d6:46:9e:e9:
86:41:02:69:2a:51:92:48:59:64:7b:a1:16:97:68:
1f:33:12:ad:de:a6:75:81:63:e7:65:13:1a:03:32:
9b:70:4d:87:8b:68:65:71:e2:d3:68:19:c0:3e:f6:
b2:50:a8:b7:f4:72:a8:a9:48:a5:de:f6:c6:b5:bb:
b7:92:66:ba:f4:22:76:65:9f:98:b8:0f:4d:0b:fe:
b8:34:a9:c2:b4:40:d5:c6:a6:b7:08:8f:b9:4d:71:
8c:54:38:b5:38:4c:c8:72:25:a7:1b:89:f0:d1:43:
7f:f1:83:3f:09:85:8c:0c:66:b6:1e:3c:a2:19:34:
71:da:86:b0:ec:37:50:3b:1b:4d:06:0f:d4:a6:f3:
5a:a3:47:a0:5a:32:6f:e4:0c:9b:e8:18:a5:a6:c7:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:0B:D5:5B:C2:38:B7:06:70:C5:04:6E:8C:FB:57:C2:0D:C9:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/1a00eadd-416e-3ddb-899c-fc71fa1458d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
X509v3 Authority Key Identifier:
keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.248.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:b1:cf:7c:01:15:6f:6b:db:b8:bb:f4:88:be:03:4d:57:9c:
9c:f7:98:c1:d8:a1:99:bc:e8:6c:32:49:b1:44:76:4f:6a:40:
2c:71:16:65:62:cf:c8:42:39:59:90:8d:33:0e:cc:f2:0c:c2:
4d:a4:88:96:68:3a:23:55:16:1e:6b:2e:74:4c:a1:29:12:8a:
d4:75:cf:2e:e1:d5:34:95:85:d7:34:ef:78:99:bd:39:d2:6c:
cf:0a:57:35:3d:b6:65:35:3a:d0:fc:fe:9c:34:4e:64:d9:24:
f9:3c:19:2d:b9:9b:02:69:7c:04:3c:a2:29:c4:07:8a:b8:14:
f7:16:c8:64:84:ff:d7:92:b8:33:53:e9:61:06:c5:e7:50:c0:
9c:3e:b4:72:88:0a:f1:ba:4f:c6:00:a6:91:5c:69:ba:65:28:
dc:92:d3:17:c4:66:67:8e:ca:72:ff:9c:0b:da:4e:49:9f:4f:
f0:10:1b:ba:5d:39:c4:27:b8:c6:e1:3a:62:91:05:87:39:08:
e8:83:28:2d:5c:fb:73:e2:c3:1f:03:ba:ff:2b:8f:34:c0:2f:
4f:f2:1b:9d:dc:35:19:85:13:a5:fe:c0:a8:da:ec:fb:5a:0a:
f9:66:e7:b3:6a:13:d7:92:a2:cc:eb:49:a9:92:18:55:57:32:
c1:73:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:08:58 2025 by rpki-client